Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 18:03:50 GMT *************** ✏️Title: How Bug Bounty Programs Work: The Ultimate Guide *************** 📎Link: https://medium.com/p/143a7bd93451 *************** ⚙️Tags: #bug_bounty_tips #cybersecurity #ethical_hacking #hacking #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 17:52:18 GMT *************** ✏️Title: Hack The Box: Devel — A Step-by-Step Exploitation and Privilege Escalation Walkthrough *************** 📎Link: https://medium.com/p/e92ad0922e26 *************** ⚙️Tags: #metasploit #windows_server #penetration_testing #hackthebox #nmap *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 17:48:03 GMT *************** ✏️Title: Brave Blue Team Lab (CyberDefenders) *************** 📎Link: https://medium.com/p/2d4b8726669c *************** ⚙️Tags: #ctf_writeup #cybersecurity #ctf #digital_forensics #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ dhtmlxFileExplorer 8.4.6 Local File Inclusion / Traversal exploit =============== 📎 https://sploitus.com/exploit?id=PACKETSTORM:189018&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 20:46:00 +0530 *************** ✏️Title: Hackers Exploit Google Tag Manager to Deploy Credit Card Skimmers on Magento Stores *************** 📎Link: https://thehackernews.com/2025/02/hackers-exploit-google-tag-manager-to.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 14:15:29 +0000 *************** ✏️Title: CVE-2024-11621 - Devolutions Remote Desktop Manager Certificate Validation Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-11621 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 14:15:29 +0000 *************** ✏️Title: CVE-2025-1147 - VMExpense Buffer Overflow Vulnerability in GNU Binutils nm Component *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1147 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 14:15:29 +0000 *************** ✏️Title: CVE-2025-1148 - GNU Binutils Remote Memory Leak Vulnerability in link_order_scan of ld component *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1148 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 14:15:30 +0000 *************** ✏️Title: CVE-2025-1193 - Devolutions Remote Desktop Manager SSL/TLS Certificate Validation Host Spoofing Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1193 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 15:15:12 +0000 *************** ✏️Title: CVE-2024-10334 - VideONet Video Feed Manipulation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-10334 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 15:15:13 +0000 *************** ✏️Title: CVE-2025-1149 - IBM Binutils Memory Leak Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1149 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 16:37:57 GMT *************** ✏️Title: Unveiling EXIF Metadata: How to Extract Hidden Information from Images *************** 📎Link: https://medium.com/p/55e7f3c7f844 *************** ⚙️Tags: #bugcrowd #hacking #2025 #exiftool #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 17:02:35 GMT *************** ✏️Title: Windows DLL Hijacking *************** 📎Link: https://medium.com/p/2a0bc64c8afb *************** ⚙️Tags: #hacking #dll_hijacking #malware #dll_injection #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 16:23:39 GMT *************** ✏️Title: Mastering Modern Red Teaming Infrastructure Part 4: Advanced OSINT Techniques, Credential… *************** 📎Link: https://medium.com/p/d2a80851a913 *************** ⚙️Tags: #darkweb #osint #cybersecurity #azure #information_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 16:20:58 GMT *************** ✏️Title: Ever wanted to be a hacker? *************** 📎Link: https://medium.com/p/445ed57d3704 *************** ⚙️Tags: #generative_ai_tools #ethical_hacking #ethical_hacking_training #technology #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 16:16:08 GMT *************** ✏️Title: How to Start Your Journey in Bug Bounty Hunting *************** 📎Link: https://medium.com/p/7e939b75a314 *************** ⚙️Tags: #tools #bug_bounty #technology #penetration_testing #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 15:41:38 GMT *************** ✏️Title: Explorando BlackField — HTB *************** 📎Link: https://medium.com/p/97de56b5ecab *************** ⚙️Tags: #ctf #hackthebox #htb #active_directory *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 15:09:09 GMT *************** ✏️Title: HackTheBox Sherlock : Trent *************** 📎Link: https://medium.com/p/700f28005dcc *************** ⚙️Tags: #hack_the_box_writeup #cybersecurity #ctf_writeup #digital_forensics #network_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 16:23:17 +0100 *************** ✏️Title: CVE-2024-8684 | KUNBUS Revolution Pi 2022-07-28-revpi-buster php/dal.php arrSaveConfig os command injection *************** 📎Link: https://vuldb.com/?id.295099 *************** ⚙️Information: #Vendor: KUNBUS #Product: Revolution Pi #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 16:23:19 +0100 *************** ✏️Title: CVE-2024-8685 | KUNBUS Revolution Pi 2022-07-28-revpi-buster getFileList.php dir path traversal *************** 📎Link: https://vuldb.com/?id.295100 *************** ⚙️Information: #Vendor: KUNBUS #Product: Revolution Pi #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security